Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: xq52MnJ3Y8LC72M0Ssp5Fi0rMlxeFpktQLTY3OL6eyU=
Subject key identifier: 1C:EA:44:BF:7F:32:22:4C:AF:64:32:28:0D:73:10:CB:78:A8:E8:32
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019849669B33EE088E443A14E2CC050A18B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: vKj0mYDTgqt+9dqlkFoumlRcuSPXFmu+5MgCx9wF0g0=)
3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9b:33:ee:08:8e:44:3a:14:e2:cc:05:0a:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=1cea44bf7f32224caf6432280d7310cb78a8e832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:f5:94:ab:92:9f:27:00:15:a7:a0:a4:c9:
ac:9a:74:ec:85:6b:4b:cb:e1:ba:cd:74:b3:0a:35:
2d:a2:4e:ec:31:2f:7a:e4:70:14:19:17:66:41:eb:
06:db:5e:52:68:61:a9:63:9d:c7:93:33:93:f9:35:
3d:c1:89:33:37:68:1f:59:8b:8c:4a:24:1c:d7:1b:
9a:36:fd:b6:7c:67:c8:81:79:da:80:3f:80:20:aa:
60:51:9c:7d:3f:a3:80:ae:c5:bf:84:98:d4:aa:05:
fa:eb:18:40:97:5e:95:b2:06:49:60:00:20:67:b5:
ec:f9:94:76:fa:25:70:a6:d7:e0:fb:d3:0e:13:20:
df:57:3e:05:49:9d:8f:48:5c:f2:e4:24:04:9c:c2:
9a:77:40:cd:11:9e:6b:47:cc:73:05:31:fa:12:89:
73:09:cf:4f:51:2d:66:d7:2d:48:78:47:05:b9:2a:
c8:2d:54:7c:52:80:60:67:84:71:89:8d:88:b3:17:
2c:98:eb:aa:f8:80:e3:67:36:fe:a9:40:d7:30:33:
f6:b3:e1:6f:34:e8:58:a6:01:81:5d:7d:36:50:de:
a2:3f:0b:53:e5:db:30:ca:53:ad:8f:7c:5d:a8:e8:
b3:57:09:2a:b6:d3:35:f1:b1:01:d7:0e:1b:0e:2c:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:44:BF:7F:32:22:4C:AF:64:32:28:0D:73:10:CB:78:A8:E8:32
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:75:a2:ec:08:95:3b:bd:0c:cc:ba:3f:e6:d7:ee:3a:b0:b0:
56:89:fe:a2:71:a4:68:a0:02:99:44:de:27:96:42:6e:8a:ef:
b1:7c:83:4d:29:0e:34:3b:09:23:1f:ad:1b:21:b0:ae:54:69:
6b:4a:b9:e6:ae:6e:78:43:e3:57:ad:df:0a:b6:7f:ca:bc:16:
48:f2:2f:17:8e:d7:fc:72:f4:b5:12:d6:80:12:e6:9b:a0:3a:
c9:30:15:c5:c3:bc:45:33:d9:2f:cb:97:12:73:07:8e:c1:e9:
c4:3b:63:2f:b7:3b:29:58:fb:69:06:0b:9e:94:10:38:05:95:
0b:53:86:2f:e2:8f:79:eb:c1:40:3e:96:4e:e4:df:da:fb:4f:
f5:40:11:09:33:c5:40:e3:b3:da:ed:bf:44:a7:90:72:7a:72:
82:cf:17:a8:39:e9:9f:00:21:23:7c:6d:30:32:c1:85:4b:c5:
97:b1:bb:3a:76:2e:ec:43:38:c4:17:43:7a:4c:7e:fd:90:44:
ca:32:89:9b:68:df:2f:34:c9:76:de:11:e2:fc:cf:71:ff:af:
d4:3e:d4:8d:df:0e:fa:b6:81:c2:c6:fd:a1:e7:e1:d1:fc:6a:
be:d1:3f:bf:78:6c:8f:18:40:41:bd:a2:1d:b4:c7:a4:84:ac:
93:83:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:37:20 2025 by rpki-client